CVE-2026-70206

An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...

CVE-2026-70263

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability affects the Microsoft Office Word application, where the flaw could lead to access to sensitive data . Microsoft has released updates t...

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70011

The Windows IP Over USB Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on confidentiality. No specific exploit informat...

CVE-2026-69940

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to perform information disclosure over a network. The vulnerability is characterized by a Medium severity rating (CVSS 3.1: 6.5), with a network attack vector and low complexity. N...

CVE-2026-69955

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . While the risk is categorized as information disclos...

CVE-2026-88137

The WebDAV Information Disclosure Vulnerability allows an authorized attacker to disclose information over a network because certain files or directories are accessible to external parties. The vulnerability is associated with CWE-552 . No specific affected versions, root causes, or remediation d...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...

EUVD-2026-99656

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-88132

An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

CVE-2026-85916

A vulnerability in Azure Active Directory allows an unauthorized attacker to perform a local disclosure of private personal information. The vulnerability is categorized under CWE-359 , which involves the exposure of private personal information to an unauthorized actor. The CVSS 3.1 score is 6.2...

CVE-2026-70277

The Windows Fast FAT Driver is affected by an out-of-bounds read vulnerability. This flaw allows an unauthorized attacker to disclose information locally . No specific details regarding the root cause, affected versions, or a specific patch are provided in the documents beyond the general driver ...

CVE-2026-70244

The Windows DNS Server is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 base score of 6.5 (Medium) , which requires user interaction and possesses a network attack vecto...

CVE-2026-69877

An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the CVSS metric and the CVE description. Microsoft has released updates to address this issue, and users are r...

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...